In response to "Frank Evan Perdicaro" <[EMAIL PROTECTED]>, who says,

> >Recall that for a dial-up connection, you are typically running IP on
> >the raw layer, TCP on that, PPP on that, then perhaps a VPN on that,
> >perhaps with SSL on that, then VNC on top, and finally the user is doing
> >something.


"Jonathan Morton" <[EMAIL PROTECTED]> says,

> Swap IP for PPP.  PPP runs on the raw layer, IP on top of that, any
> VPN goes here followed by another IP layer, TCP on top of that, SSL
> on that followed by VNC.  Please, don't mangle the OSI stack any more
> than BSD already has.

Ignoring, for the moment, the order of the layers, I'm wondering if perhaps
I don't understand what I thought I did about SSH and VPN (I hate it when
that happens.) If I had a VPN in place, would I need to run (or benefit from
running) SSH on top of it? I was interested in SSH for it's authentication
and encryption (and possibly for compression) features, all which I might
reasonably expect of a VPN implementation. I know one *could* use a VPN as a
transport for SSH traffic, and I'm sure there's some pathological case where
one might *want to*, but it the simple case ("I don't want my precious
packets running naked through the streets of the Internet."), isn't one or
the other --- VPN or SSH --- sufficient?
---------------------------------------------------------------------
To unsubscribe, mail [EMAIL PROTECTED] with the line:
'unsubscribe vnc-list' in the message BODY
See also: http://www.uk.research.att.com/vnc/intouch.html
---------------------------------------------------------------------

Reply via email to